logo
DATABASE RESOURCES PRICING ABOUT US

Security update for phpMyAdmin (moderate)

Description

This update for phpMyAdmin fixes security issues and bugs. Security issues addressed in the 4.8.4 release (bsc#1119245): - CVE-2018-19968: Local file inclusion through transformation feature - CVE-2018-19969: XSRF/CSRF vulnerability - CVE-2018-19970: XSS vulnerability in navigation tree This update also contains the following upstream bug fixes and improvements: - Ensure that database names with a dot ('.') are handled properly when DisableIS is true - Fix for message "Error while copying database (pma__column_info)" - Move operation causes "SELECT * FROM `undefined`" error - When logging with $cfg['AuthLog'] to syslog, successful login messages were not logged when $cfg['AuthLogSuccess'] was true - Multiple errors and regressions with Designer


Affected Package


OS OS Version Package Name Package Version
openSUSE Leap 42.3 phpmyadmin 4.8.4-24.1
openSUSE Backports SLE 15 phpmyadmin 4.8.4-bp150.3.6.1
openSUSE Leap 15.0 phpmyadmin 4.8.4-lp150.2.12.1

Related